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LISTHSfG OF CLAIMS 



The listing of claims provided below replaces all prior versions, and listings, of 
claims in the application. 



comprising: 

instantiating a live object in a runtime environment; 
taking a snapshot of said live object, wherein said taking said snapshot is 
performed by serializing a state of said live object; 

associating a signature with said snapshot; and 

maintaining said association between said snapshot and said signature. 

2. (Previously Amended) The method of claim 1 further comprising: 
verifying said signature; and 

constructing a new object using said snapshot, when said signature is verified. 

3. (Previously Amended) The method of claim 1 further comprising: 
storing said snapshot in another object; and 

storing said signature in said another object. 

4. (Previously Amended) The method of claim 1 further comprising: 
monitoring a status of said snapshot; and 

invalidating said signature when said status of said snapshot changes. 




add claims 29-31. 



(Currently Amended) A method M e thod for signing a live object 



5. (Previously Amended) 
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The method of claim 1 further comprising: 
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creating said signature using said snapshot. 



6. (Previously Amended) The method of claim 5 further comprising: 
associating a second signature with said snapshot. 

5 

7. (Previously Amended) The method of claim 6 further comprising: 
verifying said second signature; and 

constructing a new object using said snapshot, when said second signature is 
verified. 

10 

8. (Previously Amended) The method of claim 1 further comprising: 
.^^^^ generating an encryption key; 

^ generating an encrypted snapshot of said snapshot; 

deleting said snapshot; and 
15 associating said signature with said encrypted snapshot, said signature previously 

being associated with said snapshot. 

9. (Previously Amended) The method of claim 8 further comprising: 
maintaining said association between said encrypted snapshot and said signature 

20 associated with said encrypted snapshot. 

10. (Previously Amended) The method of claim 9 further comprising: 
verifying said signature associated with said encrypted snapshot; and 
constructing a new object using encrypted said snapshot, when said signature 

25 associated with said encrypted snapshot is verified. 
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1 1 . (Previously Amended) A computer program product for signing a 

live object comprising a computer readable medium having recorded thereon: 

computer program code for causing a computer to instantiate a live object in a 
5 runtime environment; 

computer program code for causing a computer to take a snapshot of said live 
object by serializing a state of said live object; 

computer program code for causing a computer to associate a signature with said 
snapshot; and 

10 computer program code for causing a computer to maintain said association 

between said snapshot and said signature. 



12. (Previously Amended) The computer program product of claim 1 1 
further comprising: 

15 computer program code for causing a computer to verify said signature; and 

computer program code for causing a computer to construct a new object using 
said snapshot, when said signature is verified. 

13. (Previously Amended) The computer program product of claim 1 1 
20 further comprising: 

computer program code for causing a computer to store said snapshot in another 
object; and 

computer program code for causing a computer to store said signature in said 
another object. 

25 
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14. (Previously Amended) The computer program product of claim 1 1 
further comprising: 

computer program code for causing a computer to monitor a status of said 
snapshot; 

5 computer program code for causing a computer to invalidate said signature when 

said status of said snapshot changes. 

15. (Previously Amended) The computer program product of claim 1 1 
further comprising: 

10 computer program code for causing a computer to create said signature using said 

snapshot. 

J — ^ 

16. (Previously Amended) The computer program product of claim 1 1 
further comprising: 

15 computer program code for causing a computer to associate a second signature 

with said snapshot. 

17. (Previously Amended) The computer program product of claim 16 
further comprising: 

20 computer program code for causing a computer to verify said second signature; 

and 

computer program code for causing a computer to construct a new object using 
said snapshot, when said second signature is verified. 

25 18. (Previously Amended) The computer program product of claim 1 1 

further comprising: 
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computer program code for causing a computer to generate an encryption key; 
computer program code for causing a computer to encrypt said snapshot; 
computer program code for causing a computer to delete said snapshot ; and 
computer program code for causing a computer to associate said signature with 
5 said encrypted snapshot, said signature previously being associated with said snapshot. 

19. (Previously Amended) The computer program product of claim 18 
further comprising: 

computer program code for causing a computer to decrypt said encrypted 
10 snapshot. 

20. (Previously Amended) The computer program product of claim 18 
further comprising: 

computer program code for causing a computer to maintain said association 
15 between said encrypted snapshot and said signature associated with said encrypted 
snapshot. 

21 . (Previously Amended) The computer program product of claim 20 
further comprising: 

20 computer program code for causing a computer to verify said signature associated 

with said encrypted snapshot; and 

computer program code for causing a computer to construct a new object using 
said encrypted snapshot, when said signature associated with said encrypted snapshot is 
verified. 

25 
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^ 22. (Previously Amended) A system configured to sign a live object 

existing in a runtime environment, said system comprising: 

a first module of program code executing on a computer configured to take a 
snapshot of a live object, wherein said snapshot is a serialization of a state of said live 
5 object; and 

a second module of program code executing on said computer configured to 
generate a signature using said snapshot; 

said first module configured to monitor a status of said snapshot, and to invalidate 
said signature when said snapshot is changed. 

10 

23. (Original) The system of claim 22 wherein said first and second 
modules are implemented as a second object. 



24. (Original) The system of claim 23 wherein said snapshot and said 
15 signature are stored in said second object, said second object limiting access to said 

snapshot through one or more methods of said second object. 

25. (Original) The system of claim 24 wherein said one or more methods 
of said second object invalidate said signature when said access modifies said snapshot. 

20 

26. (Previously Amended) The system of claim 22 further comprising a 
sealing module comprising: 

a key generation module configured to generate an encryption key; 
an encryption module configured to generate an encrypted snapshot from said 
25 snapshot; and 
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a deletion module configured to delete said snapshot. 

27. (Previously Amended) The system of claim 26 wherein said second 
module is configured to invoke said key generation module, said encryption module and 
said deletion module. 

28. (Previously Amended) The system of claim 27 wherein said second 
object is configured to verify said signature and construct a new object using said 
encrypted snapshot when said signature is verified. 



y 29. (New) A method for creating a signed object representing a state of a live 
object presently instantiated in a runtime environment, the live object containing dynamic 
data, comprising: 

instantiating the signed object, wherein the instantiating creates a snapshot array 
and a signature array associated with the signed object; 

invoking a method of the signed object to capture the state of the live object, 
wherein the state of the live object includes one or more current values for the dynamic 
data; 

storing the captured state of the live object in the snapshot array; 
generating a signature associated with the captured state of the live object stored 
in the snapshot array; and 

storing the signature in the signature array. 



version of a state of a live object presently instantiated in a runtime environment, the live 
object containing dynamic data, comprising: 





(New) A method for creating a sealed object representing an encrypted 
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instantiating the sealed object, wherein the instantiating creates a snapshot array, a 
signature array, and an encryption array associated with the sealed object; 

invoking a first method of the sealed object to capture the state of the live object, 
wherein the state of the live object includes one or more current values for the dynamic 
5 data; 

storing the captured state of the live object in the snapshot array; 
invoking a second method of the sealed object to create an encrypted version of 
the captured state of the live object stored in the snapshot array; 

storing the encrypted version of the captured state of the live object in the 
10 encryption array; and 

removing the captured state of the live object from the snapshot array. 



31. (New) The method of claim 30, further comprising: 
generating a signature associated with the captured state of the live object stored 
15 in the snapshot array, wherein the generating is performed prior to invoking the second 
method of the sealed object; and 

storing the signature in the signature array. 
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